CVE-2018-1000410
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
An information exposure vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier, and the Stapler framework used by these releases, in core/src/main/java/org/kohsuke/stapler/RequestImpl.java, core/src/main/java/hudson/model/Descriptor.java that allows attackers with Overall/Administer permission or access to the local file system to obtain credentials entered by users if the form submission could not be successfully processed.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
An information exposure vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier, and the Stapler framework used by these releases, in core/src/main/java/org/kohsuke/stapler/RequestImpl.java, core/src/main/java/hudson/model/Descriptor.java that allows attackers with Overall/Administer permission or access to the local file system to obtain credentials entered by users if the form submission could not be successfully processed.
- Record
CVE-2018-1000410- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
An information exposure vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier, and the Stapler framework used by these releases, in core/src/main/java/org/kohsuke/stapler/RequestImpl.java, core/src/main/java/hudson/model/Descriptor.java that allows attackers with Overall/Administer permission or access to the local file system to obtain credentials entered by users if the form submission could not be successfully processed.
- Record
CVE-2018-1000410- Updated
- 2026-11-02
EUVDEUVD-2022-2483 No score
An information exposure vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier, and the Stapler framework used by these releases, in core/src/main/java/org/kohsuke/stapler/RequestImpl.java, core/src/main/java/hudson/model/Descriptor.java that allows attackers with Overall/Administer permission or access to the local file system to obtain credentials entered by users if the form submission could not be successfully processed.
- Record
EUVD-2022-2483- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-53jp-gmwc-jwf6
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
An information exposure vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier, and the Stapler framework used by these releases, in core/src/main/java/org/kohsuke/stapler/RequestImpl.java, core/src/main/java/hudson/model/Descriptor.java that allows attackers with Overall/Administer permission or access to the local file system to obtain credentials entered by users if the form submission could not be successfully processed.
- Record
GHSA-53jp-gmwc-jwf6- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-200
- Updated
- 2026-11-02
OSV
An information exposure vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier, and the Stapler framework used by these releases, in core/src/main/java/org/kohsuke/stapler/RequestImpl.java, core/src/main/java/hudson/model/Descriptor.java that allows attackers with Overall/Administer permission or access to the local file system to obtain credentials entered by users if the form submission could not be successfully processed.
- Record
CVE-2018-1000410- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVGHSA-53jp-gmwc-jwf6
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
An information exposure vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier, and the Stapler framework used by these releases, in core/src/main/java/org/kohsuke/stapler/RequestImpl.java, core/src/main/java/hudson/model/Descriptor.java that allows attackers with Overall/Administer permission or access to the local file system to obtain credentials entered by users if the form submission could not be successfully processed.
- Record
GHSA-53jp-gmwc-jwf6- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-200
- Updated
- 2026-11-02
OSVRHBA-2018:3743
Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update
- Record
RHBA-2018:3743- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.jenkins-ci.main:jenkins-coreMaven |
through 2.138.1 | 2.138.2 |
org.jenkins-ci.main:jenkins-coreMaven |
2.140 to 2.145 | 2.146 |
org.jenkins-ci.main:jenkins-coreMaven |
before 2.138.2, plus listed versions 1.3961.3971.3981.3991.400 Show 45 moreShow less1.4011.4031.4041.4051.4061.4071.4081.4091.409.11.409.21.409.31.4101.4111.4121.4131.4141.4151.4161.4171.4181.4191.4201.4211.4221.4231.4241.424.11.424.21.424.31.424.41.424.51.424.61.4251.4261.4271.4281.4291.4301.4311.4321.4331.4341.4351.4361.437 |
2.138.2 |
org.jenkins-ci.main:jenkins-coreMaven |
2.140 up to 2.146, plus listed versions 2.1412.1422.1432.1442.145 |
2.146 |
atomic-enterprise-service-catalogRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 1:3.11.51-1.git.1671.2d16650.el7 | 1:3.11.51-1.git.1671.2d16650.el7 |
atomic-enterprise-service-catalog-svcatRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 1:3.11.51-1.git.1671.2d16650.el7 | 1:3.11.51-1.git.1671.2d16650.el7 |
atomic-openshiftRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.0.1560686.el7 | 0:3.11.51-1.git.0.1560686.el7 |
atomic-openshift-clientsRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.0.1560686.el7 | 0:3.11.51-1.git.0.1560686.el7 |
atomic-openshift-clients-redistributableRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.0.1560686.el7 | 0:3.11.51-1.git.0.1560686.el7 |
atomic-openshift-cluster-autoscalerRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.0.0aa9fc2.el7 | 0:3.11.51-1.git.0.0aa9fc2.el7 |
Show 38 moreShow less
| Package | Affected | Fixed |
|---|---|---|
atomic-openshift-deschedulerRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.300.89070e8.el7 | 0:3.11.51-1.git.300.89070e8.el7 |
atomic-openshift-docker-excluderRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.0.1560686.el7 | 0:3.11.51-1.git.0.1560686.el7 |
atomic-openshift-dockerregistryRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.446.d29ce0e.el7 | 0:3.11.51-1.git.446.d29ce0e.el7 |
atomic-openshift-excluderRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.0.1560686.el7 | 0:3.11.51-1.git.0.1560686.el7 |
atomic-openshift-hyperkubeRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.0.1560686.el7 | 0:3.11.51-1.git.0.1560686.el7 |
atomic-openshift-hypershiftRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.0.1560686.el7 | 0:3.11.51-1.git.0.1560686.el7 |
atomic-openshift-masterRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.0.1560686.el7 | 0:3.11.51-1.git.0.1560686.el7 |
atomic-openshift-metrics-serverRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.52.03e3a91.el7 | 0:3.11.51-1.git.52.03e3a91.el7 |
atomic-openshift-nodeRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.0.1560686.el7 | 0:3.11.51-1.git.0.1560686.el7 |
atomic-openshift-node-problem-detectorRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.254.22189b0.el7 | 0:3.11.51-1.git.254.22189b0.el7 |
atomic-openshift-podRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.0.1560686.el7 | 0:3.11.51-1.git.0.1560686.el7 |
atomic-openshift-sdn-ovsRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.0.1560686.el7 | 0:3.11.51-1.git.0.1560686.el7 |
atomic-openshift-service-idlerRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.14.813574a.el7 | 0:3.11.51-1.git.14.813574a.el7 |
atomic-openshift-template-service-brokerRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.0.1560686.el7 | 0:3.11.51-1.git.0.1560686.el7 |
atomic-openshift-testsRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.0.1560686.el7 | 0:3.11.51-1.git.0.1560686.el7 |
atomic-openshift-web-consoleRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.324.0ae64ed.el7 | 0:3.11.51-1.git.324.0ae64ed.el7 |
cri-oRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:1.11.10-1.rhaos3.11.git42c86f0.el7 | 0:1.11.10-1.rhaos3.11.git42c86f0.el7 |
cri-o-debuginfoRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:1.11.10-1.rhaos3.11.git42c86f0.el7 | 0:1.11.10-1.rhaos3.11.git42c86f0.el7 |
golang-github-openshift-oauth-proxyRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.419.1af74df.el7 | 0:3.11.51-1.git.419.1af74df.el7 |
golang-github-prometheus-alertmanagerRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.0.50a0687.el7 | 0:3.11.51-1.git.0.50a0687.el7 |
golang-github-prometheus-node_exporterRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.1063.12dd8be.el7 | 0:3.11.51-1.git.1063.12dd8be.el7 |
golang-github-prometheus-prometheusRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.5023.0ad933c.el7 | 0:3.11.51-1.git.5023.0ad933c.el7 |
jenkinsRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:2.138.2.1542054911-1.el7 | 0:2.138.2.1542054911-1.el7 |
jenkins-2-pluginsRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.1542061886-1.el7 | 0:3.11.1542061886-1.el7 |
kibanaRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:5.6.13-1.el7 | 0:5.6.13-1.el7 |
kibana-debuginfoRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:5.6.13-1.el7 | 0:5.6.13-1.el7 |
openshift-ansibleRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-2.git.0.51c90a3.el7 | 0:3.11.51-2.git.0.51c90a3.el7 |
openshift-ansible-docsRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-2.git.0.51c90a3.el7 | 0:3.11.51-2.git.0.51c90a3.el7 |
openshift-ansible-playbooksRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-2.git.0.51c90a3.el7 | 0:3.11.51-2.git.0.51c90a3.el7 |
openshift-ansible-rolesRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-2.git.0.51c90a3.el7 | 0:3.11.51-2.git.0.51c90a3.el7 |
openshift-ansible-testRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-2.git.0.51c90a3.el7 | 0:3.11.51-2.git.0.51c90a3.el7 |
openshift-enterprise-autohealRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.219.8ea4275.el7 | 0:3.11.51-1.git.219.8ea4275.el7 |
openshift-enterprise-cluster-capacityRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.380.ffa21af.el7 | 0:3.11.51-1.git.380.ffa21af.el7 |
openshift-monitor-project-lifecycleRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.59.7b59e29.el7 | 0:3.11.51-1.git.59.7b59e29.el7 |
openshift-monitor-sample-appRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.5.f6d0188.el7 | 0:3.11.51-1.git.5.f6d0188.el7 |
prometheusRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.5023.0ad933c.el7 | 0:3.11.51-1.git.5023.0ad933c.el7 |
prometheus-alertmanagerRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.0.50a0687.el7 | 0:3.11.51-1.git.0.50a0687.el7 |
prometheus-node-exporterRed Hat:openshift:3.11::el7 From an advisory covering 8 CVEs |
before 0:3.11.51-1.git.1063.12dd8be.el7 | 0:3.11.51-1.git.1063.12dd8be.el7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-1000410 is a high vulnerability (CVSS 7.8) in Jenkins, published January 9, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in org.jenkins-ci.main:jenkins-core 2.138.2.
References
securityfocus.com/bid/106532
jenkins.io/security/advisory/2018-10-10
nvd.nist.gov/vuln/detail/CVE-2018-1000410
github.com/jenkinsci/jenkins/commit/7366cc50106442a021c5178cd101057ecc08f2c2
Show 48 moreShow less
access.redhat.com/errata/RHBA-2018:3743
bugzilla.redhat.com/show_bug.cgi?id=1614155
security.access.redhat.com/data/csaf/v2/advisories/2018/rhba-2018_3743.json
cve.org/CVERecord?id=CVE-2018-17246
elastic.co/community/security
Left out here: 449 versions. The JSON record has them.